This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa File: c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa (raw, json) Hash identifier: vQJsOsNqmqXpOQtZLsXnJGpymLPwIhI1RihdEYQsuBk= Subject key identifier: 00:45:69:B8:F8:AD:BD:7A:A2:AE:99:78:59:BF:B9:99:6C:1D:A0:E6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584C593162CC5CFF261C6E640E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 3855 IP address blocks: 199.172.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:62:cc:5c:ff:26:1c:6e:64:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=35e30951-abba-4c5f-b69f-8ae6bf325ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:9c:e2:22:c5:46:da:ee:31:7e:e2:c8:f4: 52:82:e2:d2:48:52:d1:34:a4:31:aa:a1:9d:70:4e: ee:e1:cc:ce:11:29:cb:36:72:ba:3d:d5:3f:b8:98: 5e:50:d8:f9:d3:3c:fc:9e:f5:d0:31:9c:9e:00:26: a4:29:bd:10:21:10:d9:42:46:3c:3c:f7:45:84:11: b2:fc:33:99:15:fe:53:bb:3c:6b:5c:7a:16:c6:b0: 4e:55:f2:27:b0:8f:51:fb:a1:5d:f5:7d:23:77:11: 70:cd:5b:67:85:e3:79:05:28:c8:d7:f6:64:6b:71: e4:32:85:19:45:7e:94:fd:31:96:bf:ea:09:00:61: a8:03:72:19:45:9d:fc:07:ed:8f:f0:eb:a5:1c:85: ca:c6:6c:94:86:93:fb:89:d1:c5:86:d6:c6:db:24: 98:b0:e9:62:83:ac:a5:91:77:25:d1:5f:bd:64:8c: ef:56:51:21:31:41:78:cf:4f:c3:94:c7:71:3c:5b: b7:94:fb:ed:69:d6:74:3a:06:74:e5:1c:f1:fd:79: af:66:76:81:bf:09:d5:5e:ba:18:05:06:49:68:52: 20:39:72:e8:8d:f1:24:76:9a:96:2c:fb:cf:33:6b: be:56:7e:ac:8b:62:f6:b8:51:5e:0d:6b:48:e9:b4: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:45:69:B8:F8:AD:BD:7A:A2:AE:99:78:59:BF:B9:99:6C:1D:A0:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6b:3e:67:82:3c:fb:5f:f1:61:4b:7b:a4:78:c4:22:d9:8d: 9f:f4:fe:4b:6e:e4:e8:be:96:e3:7a:95:2c:01:d1:96:62:fb: ce:e3:66:f1:5e:45:a4:20:71:d2:ad:a3:af:15:df:72:3b:ef: cb:0f:2b:c2:69:f1:68:06:54:a8:8a:5f:bc:87:f9:82:9c:27: 64:cc:ca:48:40:9e:c4:ee:75:38:ba:e7:9f:2f:fa:d2:69:93: 38:ab:cb:8f:58:67:d1:31:85:3f:aa:65:99:67:3f:3f:9f:3a: 60:d8:f6:21:c7:e7:73:15:30:30:09:8a:0c:76:41:9a:cd:f5: 98:03:2e:3c:96:85:27:25:c9:e0:a6:e7:37:73:78:a4:76:f3: 4a:e1:8a:4e:ce:8b:6d:7d:f3:d0:91:7a:fa:e4:a6:a5:29:42: 5e:cf:6a:05:d4:83:e3:72:25:b3:d3:47:8c:27:3c:7f:f7:58: c8:11:9d:88:aa:7c:81:eb:dc:f1:c8:0b:23:58:a4:cf:1d:23: 71:52:af:f4:13:cb:1a:74:0e:19:19:50:40:5e:b1:98:3c:5f: aa:08:48:61:6d:bc:b9:04:1c:b3:db:0f:66:76:8f:7a:35:d5: fc:fb:26:fc:8b:de:62:52:48:f5:8e:2f:02:ab:86:a1:c9:65: da:c0:5d:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMWLMXP8mHG5kDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk MzVlMzA5NTEtYWJiYS00YzVmLWI2OWYtOGFlNmJmMzI1ZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwOc4iLFRtruMX7iyPRSguLSSFLRNKQxqqGd cE7u4czOESnLNnK6PdU/uJheUNj50zz8nvXQMZyeACakKb0QIRDZQkY8PPdFhBGy /DOZFf5TuzxrXHoWxrBOVfInsI9R+6Fd9X0jdxFwzVtnheN5BSjI1/Zka3HkMoUZ RX6U/TGWv+oJAGGoA3IZRZ38B+2P8OulHIXKxmyUhpP7idHFhtbG2ySYsOlig6yl kXcl0V+9ZIzvVlEhMUF4z0/DlMdxPFu3lPvtadZ0OgZ05Rzx/XmvZnaBvwnVXroY BQZJaFIgOXLojfEkdpqWLPvPM2u+Vn6si2L2uFFeDWtI6bReoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABFabj4rb16oq6ZeFm/uZlsHaDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRlYTAyMjEtNTRhMS0z MGExLWE3MGYtNTczOTk2MWQxYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNrPmeCPPtf8WFLe6R4xCLZjZ/0/ktu5Oi+luN6lSwB0ZZi+87jZvFe RaQgcdKto68V33I778sPK8Jp8WgGVKiKX7yH+YKcJ2TMykhAnsTudTi6558v+tJp kziry49YZ9ExhT+qZZlnPz+fOmDY9iHH53MVMDAJigx2QZrN9ZgDLjyWhSclyeCm 5zdzeKR280rhik7Oi21989CRevrkpqUpQl7PagXUg+NyJbPTR4wnPH/3WMgRnYiq fIHr3PHICyNYpM8dI3FSr/QTyxp0DhkZUEBesZg8X6oISGFtvLkEHLPbD2Z2j3o1 1fz7JvyL3mJSSPWOLwKrhqHJZdrAXQI= -----END CERTIFICATE-----Generated at Sat Jan 10 04:26:30 2026 by rpki-client